PRIVACY & GDPR

Privacy Policy

BJJ Studio is aware that you place your trust in us, and we therefore see it as our responsibility to protect your privacy. In this Privacy Policy, we explain what data we collect when you use our services, why we collect it, how we use it, and how we safeguard your information in compliance with the General Data Protection Regulation (GDPR / AVG) and the Dutch UAVG, including Article 8 regarding children.

Last revised 01 September 2026

1. Who is Responsible?

BJJ Studio, established in The Hague, is the data controller for all personal data collected and processed in the context of its services. We determine the purposes and means of processing your data and are responsible for compliance with applicable privacy laws.

2. What Personal Data Do We Collect?

We may collect and process the following categories of personal data:

Full name, address, and contact details (email, phone)
Date of birth and gender
Payment and billing information
Emergency contact details
Membership history and participation records
Medical or health information (with explicit consent)
User data from our website, mobile app, or digital registration
Photo/video material. The Studio may collect and store a photo of each member for membership records and internal identification purposes. (for media use – see section 10)

We collect this data directly from you or, in the case of minors, from their parents or legal guardians after written approval.

3. Why Do We Collect Your Data?

Your personal data is collected and processed for the following purposes:

To manage memberships and class participation;
To handle billing and administrative communication;
To maintain internal records and improve services;
To comply with legal and tax obligations;
To inform you of schedule changes, updates, and events;
To promote the school via media (with opt-out option);
To ensure health and safety during training or in case of emergencies.

4. Legal Basis for Processing

Your data is processed based on the following legal grounds:

Performance of a contract (e.g., membership agreement);
Compliance with legal obligations (e.g., tax laws);
Legitimate interests (e.g., service improvement, communication);
Explicit consent, where required (e.g., health data, photos and videos).

5. Data Sharing

We do not sell or share your personal data with third parties, except:

When required by law or government authorities;
With essential IT or payment service providers, who are bound by GDPR-compliant processing agreements and strict confidentiality, and only receive necessary data
When responding to legal claims or fulfilling legitimate legal requests.

Data sharing is strictly limited to what is needed for service provision and legal compliance.
All external parties are subject to confidentiality and GDPR-compliant processing agreements.

6. Data Security

We apply appropriate technical and organizational measures to protect your data from loss, misuse, or unauthorized access. These include encryption, access control, secure storage, and regular security reviews.

7. Data Retention

Your personal data is retained only as long as necessary for the purposes collected, or as legally required (e.g., tax records are kept for 7 years after membership ends; medical data is retained for up to 2 years after membership unless otherwise required by law). Data is then securely deleted or anonymized.

8. Your Rights

As a data subject under GDPR, you have the following rights:

Right of access to your personal data;
Right to rectification of inaccurate data;
Right to erasure (“right to be forgotten”) in certain cases;
Right to restrict processing;
Right to object to processing based on legitimate interest;
Right to data portability;
Right to withdraw consent at any time (for consent-based processing);
Right to lodge a complaint with the Autoriteit Persoonsgegevens (www.autoriteitpersgegevens.nl).

To exercise any of these rights, please contact us directly. We will respond within one month.

9. Automated Decision-Making

BJJ STUDIO never uses personal data for automated decision-making or profiling in any way.

10. Use of Image and Likeness

By participating in BJJ STUDIO activities, you acknowledge and agree that your image and likeness may be captured in photographs or videos. We use these materials for the purposes of public communication, documentation of events, safety and well-being of participants, and for educational or promotional content related to BJJ STUDIO and Brazilian Jiu-Jitsu.

Legal Basis for Processing Images and Videos:

Legitimate Interest (Article 6(1)(f) GDPR/AVG): For general ambiance shots, group photos, or videos taken in public areas of the academy or during events, where the individual is not the sole focus. Our legitimate interest lies in promoting our activities, documenting our community, and showcasing the sport. We balance this interest against your privacy rights.
Consent (Article 6(1)(a) GDPR/UAVG): For close-up photographs, individual portraits, or in situations where specific consent is requested and obtained (e.g., for the membership profile). You have the right to withdraw your consent at any time.

Data Sharing and Publication:

Content, with exception of individual portraits, may be published on our official platforms (e.g., website, and social media channels) and is never shared with media partners or other public institutions.

Special Considerations for Image and Video Publication:

We take extra care when publishing content, particularly involving:

Individuals in sensitive roles (e.g., undercover officers, diplomatic staff, or their family members);
Situations that may pose a risk to personal safety or operational security;
Minors, for whom additional considerations and parental consent protocols are applied, consistent with our safeguarding policies.

We recognize the heightened sensitivity of children’s personal data; therefore, we are especially careful with images, videos, or any likeness of children. We avoid collecting such content unless it is absolutely necessary and only with proper consent. This is to protect children’s safety and privacy.

Data Retention for Images and Videos:

Images and videos will be retained for as long as necessary for the purposes stated above, unless a data subject requests erasure under applicable rights.

Your Rights Regarding Images and Videos:

You have the right to object to the processing of your image or likeness based on legitimate interest, or to withdraw any given consent at any time. Should you prefer that your image or likeness not be used, please notify us in person or writing. We will respect your request and ensure your image is not used for future promotional purposes. For existing material, we will take reasonable steps to remove your image where feasible.

11. Contact Information

For privacy questions or to exercise your rights, please contact us at info@bjjstudio.nl